10.3. Review Risk Information

Up to this point in the OCTAVE Method, you have been setting the stage for problem-solving activities. If you are in a large organization, you probably scheduled the evaluation activities over many weeks. Thus, before you start to create solutions for your organization's security issues, you need to review the data that you have gathered.

In this activity you review the major pieces of data that you have collected and generated throughout the previous processes of the OCTAVE Method. You can either complete your review individually before the workshop, or you can review the information as a group as part of the first activity of the process 8A workshop.

Reviewing Information

You must review both organizational information ...

Get Managing Information Security Risks: The OCTAVESM Approach now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.